Short version: Stop That runs on your iPhone and is built to keep your data there. There is no account and no login. The apps you choose to block, the shields you set, your usage stats, and every word you type stay on your device. The only things that ever leave your phone are anonymous setup analytics and a check of whether your subscription is active, and never your Screen Time data.
Who we are
Stop That is operated by Daniel Keen, trading as Stop That, a sole trader based in the United Kingdom. We make the Stop That app for iPhone. We are the “data controller” for the limited personal data described below. In this policy, “we”, “us”, and “Stop That” mean that operator. Questions, or to exercise any of your rights, email hello@stopthat.app.
What stays on your device
Stop That uses Apple’s Screen Time framework (Family Controls) to heckle and then shield the apps you choose. All of this happens on your iPhone and never leaves it:
- The apps you block. You pick them with Apple’s own app picker. The shields we show, and the on-device stats we compute (time saved, attempts blocked, your trend over time) live only on your iPhone.
- Your Stop Reason and any confession text. The reason you type for why you want to stop, and the words you type to lift a shield, stay on your device and are never transmitted.
- Your settings. Whether heckle sounds are on, and everything else you configure, is stored in the app’s own local storage on your phone.
None of your Screen Time data ever leaves your iPhone. There is no cloud sync of your selections, shields, or usage, and no Stop That account to sync to.
What leaves your device
Two things, and both are anonymous. Neither is tied to a name, an email, or an account, because the app has no account system:
- Anonymous setup analytics (PostHog). To see where people get stuck setting the app up, we send a short, fixed list of milestone events to PostHog, our analytics processor (EU cloud): the app opening, onboarding progress, whether you granted the Screen Time permission, paywall views, which plan you picked, subscription start, restore attempts, Start Watching, a one-time marker that your first block happened, and that a confession was completed (never its text). Events are keyed to a random, anonymous device identifier. There is no autocapture, no screen recording, no session replay, and no screenshots. We never send your selected apps, Screen Time tokens, Stop Reason, confession text, usage stats, blocked attempts, or activity history.
- Your subscription status (Apple + RevenueCat). The subscription is bought through Apple’s In-App Purchase. Apple processes your payment. We never see your card details. We use RevenueCat to check whether your subscription is active, using the same anonymous device identifier, no email, no name. That check is the only thing that decides whether blocking is on. If your subscription lapses, enforcement simply stops.
Screen Time & Family Controls
Stop That is built on Apple’s Family Controls, DeviceActivityMonitor, and ManagedSettings shields. It is important to understand how little the app sees:
- We only receive opaque tokens. When you pick apps to block, Apple hands our app opaque activity tokens. It never tells us which apps you chose. We cannot see the names or identities of your apps, and we never receive them.
- This is not parental controls. Stop That is a self-control tool for your own device. It never monitors anyone else, and it is not built to watch a child or another person’s phone.
- You are always in control. The app sets no Screen Time passcode and holds nothing irreversible. One tap of Stop Everything (after a short typed confession) lifts every shield and stops all monitoring.
No tracking, no ads, no selling
- No advertising identifiers. We do not use the IDFA and we do not ask for App Tracking Transparency permission, because we do not track you.
- No cross-app or cross-site tracking, and no linking your activity to your identity.
- The analytics we do collect are used to improve the app, never to build an ad profile.
- We never sell or rent your data to anyone.
Who we share data with
We use a few trusted providers (“processors”) purely to run the service:
- Apple sells and processes the subscription through the App Store. Your payment is handled by Apple under its own terms. We never see your card details.
- RevenueCat checks the subscription’s status for us, keyed to an anonymous device identifier with no email or name.
- PostHog receives the anonymous funnel events described above, in its EU cloud.
Each handles data under its own privacy policy and only on our instructions.
Children
Stop That is not directed at children and is not intended for use by anyone under 16. It is a self-control tool for your own device, used by one person on their own phone. It is not a parental control product for supervising someone else.
Your controls
Because your activity data lives only on your own device, you stay in control of it:
- Delete the app to remove all local data. Uninstalling Stop That removes everything it stored on your device. Your app selections, shields, usage stats, Stop Reason, and confession text all go with it. (Deleting the app does not cancel your subscription. See below.)
- Manage your subscription in the App Store. View, change, or cancel it in Settings → your name → Subscriptions.
- Revoke Screen Time access any time. Turn off the Screen Time permission in iOS Settings whenever you like.
The app’s analytics are anonymous and not linked to your identity, so we cannot single out your events. Deleting the app stops any further ones. For any question about the limited data we hold, email hello@stopthat.app. If you think we have mishandled your data, complain to the UK’s Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the chance to put things right first.
Changes
We reserve the right to update this policy as the app evolves. When we do, we will change the “Last updated” date above. Material changes will be highlighted on this page.
Contact
Questions about privacy? Email hello@stopthat.app.